Ran into a problem when I tried adding some MCX profiles that were created to be used with 10.6 on a test Mountain Lion machine. The profiles work correctly but when I remove the machine from the MCX profile, the settings keep reappearing in /Library/Managed Preferences, and even if I delete the files manually they reappear after a reboot seemingly without even checking in with the JSS. Is there something that I'm missing or should I recreate as much of the functionality as I can with the Profile Manager method?

So this issue was reported elsewear a year ago, though I never saw it happen until I just updated our base image to 10.7.5 > apps store InstallESD, pure vanilla InstaDMG. http://forums.macrumors.com/showthread.php?t=1240725 Newly imaged machine cannot login as local admin or AD domain user. After entering credentials the screen flashes gray and then back to the auth. prompt. The reboot button also will not work. Pretty much identically reported, though no solid solutions are mentioned. Has anyone here seen this and nailed down 'why'?

Hello community! I am either still exhausted from the JNUC, or I am just overly confused. Would anyone mind helping me through changing a non-http distribution point into an http distribution point? My main distribution server is running OS X Server 10.7.5, and the CasperShare directory is located in /Shared Items/CasperShare. I have https access allowed on this server (IE you type the xx.xx.xx.xx address and you get the Lion Server Splash Page), but do not have any idea what to do when it comes to setting this up. Note: I am changing to HTTP on this one server because otherwise Self Service runs into an issue due to other share points that clients have mounted on their machines. According to the lectures at JNUC, turning on HTTP access should fix this issue. Thanks in advance for the help!

I'm running 8.43 on a Lion server (that only runs JSS and SUS) and when I attempt to view a smart group in JSS it takes 5+ minutes if it loads at all. Any ideas on how to remedy this? The group in question only contains 9 machines.

We are pleased to have Michael Crispin from Duke University walk us through how he is able to deploy and manage Dual-Boot machines in his environment with the help of Casper, Boot Runner, and Winclone. We'll also have Tim Perfitt from Twocanoes Software (Creators of Winclone and BootRunner) available to answer any questions you might have regarding the management of Dual-Boot machines. For more information about Winclone or Boot Runner, please visit: http://www.twocanoes.com

Hi all,Is a managed preference executed if it appears in the /Library/Managed Preferences folder? Or does it need to appear in this folder as well as update the plist that the managed preference is supposed to address. For example, I am using managed preferences to disable AirDrop. The managed preference: com.apple.NetworkBrowser.plist appears in the /Library/Managed Preferences folder but it doesn't appear to have been re-written /Library/Prefences/com.apple.NetworkBrowser.plist........Should it have edited the file in /Library/Prefences/ or does having it in /Library/Managed Preferences mean that is is being applied? Thanks!

This session is taking place in McGuire Proscenium Stage (Level 4) from 10:45am-11:45am. As of today Phil Hardin has worked on—and is still working on—a total of 19 one-to-one deployments within the Rowan-Salisbury school system. In this session, Phil will reveal how he has saved time and avoided common pitfalls while tackling these intense projects. He'll also touch on some issues that IT administrators commonly encounter during one-to-one deployments, and how he is using Aerohive and the Casper Suite to avoid them. This session is geared towards both new and experienced Casper Suite users. Have you worked on a 1:1 deployment, and have something to share? Do you have any questions you want answered? Please leave us comments here, and we will try and get to them during the Q & A session next week. Only 4 days to go! Can't wait to see everyone at the Guthrie.

In a presentation yesterday someone quickly demonstrated Self Service and had bookmarks down the left column. How do you do that? I believe they said it is available on 8.6+ so we should be good...I just don't recall seeing that in my daily use of the JSS yet. Anybody got documentation on how to utilize that feature? Thanks!

I'm trying to set up a new client server on our cluster - until now it's been a simple parent/child setup, but I'm adding several child servers, this one being the first. Trying to install the JSS on the new server, it's refusing to accept the MySQL information of the parent server. I verified the info from the DB utility's xml file (which is a security issue, but that's another topic) so everything seems correct but it's still refusing to connect. Ideas? Should I just install a local MySQL and then reconfigure the box to point to the master after the fact?

Hello All,Java updates for OS versions later than 10.6 do not come from Apple anymore. Is it true?Is Apple announced about two years ago that they were discontinuing maintenance?Oracle is handling the Java releases for 10.7 and later. Is it True.?As still i can see Java updates comes along with the Mac OS X Patch Updates (Software Updates) for Mac OS X 10.7.X and Mac OS X 10.8.x. Kindly Advice. Regards,SonuW

We have a few custom plugins in self service. They are used to open links to our web help desk and some training documentation. After upgrading to 8.43 some machines are no longer displaying these plugins. All Lion machines display fine but a few snow leopard and one leopard machine are not displaying these plugins. I have tried removing the self service plist, clearing user and system level caches. Has anyone seen this issue?

From the JSS web portal how/where do you add packages? And then how do you deploy these packages?

Does anyone have a copy of Java for OS X 2012-005 on their ASUS that they could send my way? We use a legacy enterprise web application that is dependent on Java 6, and with the release of Java 2012-006 computers running 10.7 and 10.8 are unable to access the application. We've blocked further installation of 2012-006 via ASUS, but need to be able to repair computers that already installed the update.

I want to create a Self Serve item that will then list the available software updates with the friendly name like you'd get from the GUI, not the ugly output you get from the command line; even though I'll have to call the command line version to grep whats available. I haven't thought out the delivery logic yet; jamfHelper, shell, Applescript, custom triggers etc. Whatever the case, is there a way to pull the nice names from the command line? thanks,Darrin

While I'm sure it's easy, I've not yet found how to search inventory for Local User Accounts. My boss asks me to use Casper to tell him details of the compter Jane Doe uses. I have no idea which computer she is using, as our new naming convention no longer incudes the primary user's name. I can see her username as one to suppress in the Suppress Accounts option, so I know it's there. I've looked through the Advanced search settings to no avail. Can you tell me how to search my inventory for local user accounts?

I've been using Neagle's great tool "InstallOSXpkg" to deploy Lion and have now begun testing with Mountain Lion. That tool is introduced here: http://managingosx.wordpress.com/2012/07/25/son-of-installlion-pkg/ The problem: I can't get the right policy settings to both properly reboot the mac into its install environment AND log the policy as completed. Instead, what happens is one of three things: 1) If I set the policy to "reboot only if a package or SWU requires", the copy of the install is made but the installation of the OS never happens. The computer remains booted, just now with an "Install OS X Data" folder in the root directory. 2) If I set the policy to "reboot only if a package or SWU requires" AND also add "/sbin/reboot" into the RUN COMMAND field in the advanced tab, the copy will occur, the mac will reboot into the right environment and the new OS will install! However... the policy won't log that i

Realizations: 1) This is OT but I am asking anyone and everyone. 2) My server OS is way out of date. [10.5.8] (I took over this environment not long ago and am in process of getting new hard/software) Last night I was at home working on my server. Moving files, backing up logs...normal stuff. I was prompted to run updates on my MacBook Pro so I disconnected from the SSH sessions I was using, ran my updates and rebooted. After getting back on VPN I was able to SSH back into all machines except for this one and this is my JSS. I'm completely stuck and my fingers are sore of googling. Please if anyone has seen this before and can shed some light I would be eternally grateful. Never have I seen an OS that removed all users admin privileges. EDIT - 0Forgot to say that when you check "Allow user to admin...." it DOES give you the warning to reboot before changes can take place but as you could imaging once you reboot it's back unchecked. external image

Our inventory peeps aren't happy with the fact that Casper displays each model name exactly how Apple names it.. Meaning, they don't like "MacBook Pro (Mid 2012)" They just want it to say "MacBook Pro" or "MacBook Air" I've got the follwing ext. attribute that sort of does the trick: #!/bin/shKind=system_profiler SPHardwareDataType | grep "Model Name"echo "<result>$Kind</result>" However that returns the result as: Model Name: MacBook Pro And they still don't like that cuz they have to edit out "Model Name" Does anyone have any idea how to get it to say just "MacBook Pro" ??? Thanks!!! A

I have a script that has been working for 10.6 that unlocks Network for non admins, but it doesn't seem to work with 10.7. Anyone have any ideas what it takes to make it work in 10.7? Below is my current script I am using for this. Thanks!Alan #!/usr/bin/perl $plbud = "/usr/libexec/PlistBuddy"; $auth = "/private/etc/authorization"; $sysprefso = `$plbud -c "print :rights:system.preferences:session-owner" $auth`; if ($sysprefso !~ /true/) { print"Needs authorization file modified "; # Set system.preferences settings here system"$plbud -c "add :rights:system.preferences:session-owner bool true" $auth"; system"$plbud -c "set :rights:system.preferences:session-owner true" $auth"; system"$plbud -c "set :rights:system.preferences:allow-root true" $auth"; system"$plbud -c "set :rights:system.preferences:comment Authenticate either as the owner or as an administrator." $

Hi All. We've recently rebuilt our Master Casper server to 10.8.2.. the Replica's are on 10.7.5. I've tried the below to recreate the SSH public keys on the clients so we can re-do the RSYNC connections unprompted when running a shell script via a launch daemon. However I keep getting the error "Permission denied (publickey,gssapi-keyex,gssapi-with-mic,keyboard-interactive)." when running as root. If I run as any other user, I am prompted for a password.. so i'm guessing it's not working.. Maybe something has been left on the replica's referencing the old master? Any ideas? 1. Login to ReplicaServer as Administrator. 2. Click “Go” in the menu bar & select “Utilities.” 3. Once in the Utilities, open Terminal. 4. Enter the following commands in order on (each is on a single line). Press Enter after each command: a. sudo su b. Type Administrator password when prompted, press

I just saw the posted schedule and noticed that the sessions "Mass iOS Deployments" and "Don't Get Schooled by Your One-to-One iPad Deployment" are scheduled at the same time (Thurs 1-2pm). These sessions are both on iPad deployment and I was wondering if they could be scheduled for different time slots so that people could attend both. I'm sure there are other folks like me who want to attend both of these sessions given that they are both regarding iPad/iOS deployments. Thanks for considering!~Joe

After running Optimize Database Tables, and I was the only one using the web interface, I received all kinds of errors and then the database was completely deleted after restarting Tomcat. I restored from a backup and all is well, but heads up in case you're ever tempted to click on that link. There should probably be some sort of warning before it lets you use that feature.

Hey all, I have an 802.1x profile going out to our 384 Lion managed clients. Unfortunately when making a change (the only way, it seems, to see how many computers a profile has gone out to) it says that there are only 225 clients that have this profile. As we transition to our new wireless security, this is a big problem that 160 clients are not getting the 802.1x profile. Why would a configuration profile not be going out to all managed clients? Do I have to delete this one and try a new one?

HI all, I am experimenting with a number of MCX's in 10.8 (yeah yeah, use config profiles. I'm using MCX for some things, deal). I've made several changes to a few MCXs, the screen saver lock MCX we have, for example. Originally I had it set as this: com.apple.screensaver askForPassword acaldwell (User) always 1 askForPasswordDelay acaldwell (User) often 0 idleTime acaldwell (User) often 1200 I later changed it to read: com.apple.screensaver askForPassword acaldwell (User) always 1 askForPasswordDelay acaldwell (User) often 0 idleTime acaldwell (User) always 600 But for whatever reason I cannot get the Mac to refresh it's MCX settings. I've used jamf mcx -user acaldwell about a hundred times, rebooted, reset P

Is anyone experiencing consistent 5+ minute delay on logins for machines bound to Win AD 2008 R2 on Lion only? ML does not seem to have this issue. We've regressed the issue to the point that it might be caused by some configuration issue when using the Casper bind as part of the imaging process. I know the question is a bit vague, but I don't want to overdetermine this. Thank you!